Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: tC3TtfV0D+Qpd0wXn5HkfA/qZOZ94CTstJMIuLGbm3A=
Subject key identifier: B0:07:93:E6:24:AB:17:4F:09:08:FD:B9:CC:FA:8A:A1:23:96:48:10
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 019D265F9D9515F8DCAB64E556C9E023FCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:33 +0000
Manifest this update: Wed 25 Mar 2026 19:01:33 +0000
Manifest next update: Thu 26 Mar 2026 19:01:33 +0000
Files and hashes: 1: 0Uqlzj0wBudtuwo65E7ecBxR-5I.roa (hash: 3nBce/u/p8RQlISZvZNTZJ4v/xHNCVwY/ApDTxv5Cr0=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: NNKWU++0QiaHBwp1Dr1CKXH7ddu9cEcZG2v8SB+mQig=)
3: pDNCrYaJz93_0ruXQrWKPUYVC7w.roa (hash: dZXhJB4noMnp9QFyGzeSZGgePn7dhbkhRF5jupjuOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9d:95:15:f8:dc:ab:64:e5:56:c9:e0:23:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Mar 25 19:01:33 2026 GMT
Not After : Mar 26 19:01:33 2026 GMT
Subject: CN=b00793e624ab174f0908fdb9ccfa8aa123964810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:03:b0:a2:45:6c:96:55:db:1d:e4:62:5a:
70:e6:da:a9:6b:21:31:49:e1:2b:1e:85:0b:be:bf:
61:96:c5:7c:bd:de:b8:1e:da:ce:84:db:5b:0c:e6:
db:b7:da:a4:00:7b:d6:41:61:e6:72:a1:e4:ee:79:
93:80:a5:b1:af:18:d4:0f:66:ef:6c:22:48:5c:90:
83:ce:6e:61:5a:a9:9b:5b:6a:61:e7:a9:51:c8:f9:
01:17:78:15:a0:d2:7e:ae:05:cb:5e:db:e7:6b:8e:
9e:5e:7f:64:85:96:38:76:7f:93:ef:e4:3a:36:4e:
15:6c:62:d0:9c:c1:a4:f4:2d:ac:a5:23:27:40:2b:
b9:3c:c7:db:28:75:1a:d9:30:97:cc:5c:a6:31:af:
87:85:94:d9:4b:bd:a3:a8:77:45:5a:30:ee:b1:34:
01:23:11:09:2a:af:01:ae:27:a4:b0:dd:1b:29:7b:
50:93:ea:46:f9:8b:bc:2c:fb:32:3e:1e:be:bd:bf:
36:ed:f8:3a:af:66:d6:21:e5:60:9e:d9:3a:af:c1:
e2:77:af:35:cb:bb:60:0b:61:8a:c5:59:ff:5e:af:
cd:90:eb:96:a1:dc:89:b7:30:79:38:00:50:b1:80:
bf:21:36:27:fc:27:4e:eb:18:ae:7c:4c:3b:24:1c:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:07:93:E6:24:AB:17:4F:09:08:FD:B9:CC:FA:8A:A1:23:96:48:10
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0d:ed:d3:2d:fa:e0:59:dc:cf:70:2e:29:15:1b:a3:df:da:
ad:72:96:c4:5d:13:20:d1:f8:1a:96:d2:7e:6d:e5:53:cf:15:
9c:03:67:54:83:15:0f:e5:6c:4a:1f:b2:f9:1d:bf:4a:b7:4f:
41:da:44:01:73:9c:9c:ce:78:42:4d:f9:3e:2d:ca:3e:e7:ba:
cf:e8:34:bb:e4:22:57:01:78:16:b0:e7:ef:22:a7:5d:0f:b4:
88:2a:d0:5f:90:39:4b:e1:9c:89:cf:75:26:c6:b2:e2:c0:c1:
a4:b1:05:ba:c9:c9:34:47:c8:28:34:fb:d1:78:3a:38:66:ba:
97:40:24:4b:45:c6:16:6e:9d:d0:cc:bc:87:b9:e0:25:f5:a4:
36:e1:4a:0d:38:bb:70:6b:28:d8:e6:ab:5b:ed:ef:7f:23:8b:
1c:17:87:d9:f0:97:8f:19:76:2e:e4:e6:e4:52:94:1c:67:7c:
78:35:56:5e:47:d4:b8:ff:fd:3b:96:58:a7:da:25:60:83:77:
cb:a3:c1:24:7b:12:de:6a:9c:80:0e:28:19:81:a2:89:9a:3d:
26:cb:69:58:90:b2:95:03:65:da:4c:64:01:f4:e5:60:8b:8b:
c6:58:f9:2b:1a:e0:54:2c:b8:d9:cb:3a:39:3f:16:d8:8a:c5:
86:50:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:08 2026 by rpki-client